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CLAIMS: 

1. A computer-readable medium having computer-executable 
instructions that, when executed by the system, performs a method comprising: 

obtaining a message M; 

defining a vector v to be v h ...,v n based upon a predefined first hashing 
function of the message; 

calculating a private key a in accordance with this equation 

n 

a = ^ j v i a i modm; 
i=i 

producing a signature S in accordance with this equation: S = aH 2 (M), 
where H 2 (M) is a predefined second hashing function of the message; 

indicating results based, at least in part, on the obtaining, defining, 
calculating, or producing. 

2. A medium as recited in claim 1, wherein the results of the indicating 
comprises a message-and-signature pair (M f S). 

3. A medium as recited in claim 1, wherein the results of the indicating 
comprises a message-and-signature pair (A/, //S) and the method further comprises 
calculating ju = H 3 (BK, M), where BK is key and H 3 (BK, M) maps M into an 
integer within a defined range. 
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4. A medium as recited in claim 1, wherein the a* are scaling factors for 
n discrete logs of a } P,... 9 a n P base P, where n is a positive integer, P is a point 
on an elliptic curve and a public key. 

5. A medium as recited in claim 1, wherein 

di are scaling factors for n discrete logs of a x P,...,a n P base P, where n is 
a positive integer, wherein P is a point on an elliptic curve; 

a point P is of order m and where e m (P,Q):E[m]xE[m]-^GF(qy denotes 
a Tate or Weil or Squared Tate or Squared Weil Pairing, where a,P,...,a rt P = 
Q ]9 .-,Q„ and where q is a prime power. 

6. A medium as recited in claim 1, wherein the signature S is 
represented by a number of bits, wherein the method further comprises truncating 
a specific number of bits off of S before the indicating. 

7. A medium as recited in claim 1 , wherein the first hashing function 
produces values in {±1}. 

8. A computing device comprising: 
an output device; 

a medium as recited in claim 1 . 
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9. A computer-readable medium having computer-executable 
instructions that, when executed by the system, performs a method comprising: 

choosing n discrete logs of a,P,...,a n P base P, where n is a positive 
integer, P is a point on an elliptic curve and a public key, and a; is a scaling factor 
and a private key; 

indicating results of the choosing. 

10. A medium as recited in claim 9, wherein a point P is of order m 
and where e m (P,Q) : E[m]x E[m] -» GF(qY denotes a Tate or Weil or Squared Tate 
or Squared Weil Pairing, where a,P,...,a rt P = Q l9 ...,Q„ and where q is a prime 
power. 

11. A medium as recited in claim 9 further comprising generating a 
digital signature based upon a message M and 04. 

12. A computing device comprising: 
an output device; 

a medium as recited in claim 9. 
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13. A method facilitating the production of a digital signature, the 
method comprising: 

obtaining a message M; 

defining a vector v to be v u ...,v n based upon a predefined first hashing 
function of the message; 

calculating a private key a in accordance with this equation 

n 

a = ^v^mod/w ; 

i=i 

producing a signature S in accordance with this equation: S = aH 2 (M), 
where H 2 (M) is a predefined second hashing function of the message; 

indicating results based, at least in part, on the obtaining, defining, 
calculating, or producing. 

14. A method as recited in claim 13 wherein the results of the indicating 
comprises a message-and-signature pair (M f S). 

15. A method as recited in claim 13, wherein the results of the indicating 
comprises a message-and-signature pair (M, juS) and the method further comprises 
calculating // = H 3 (BK, M), where BK is key and H 3 (BK, M) maps M into an 
integer within a defined range. 

16. A method as recited in claim 13, wherein the a- are scaling factors 
for n discrete logs of a x P,...,a n P base P 9 where n is a positive integer, P is a 
point on an elliptic curve and a public key. 
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17. A method as recited in claim 13, wherein 

Oj are scaling factors for n discrete logs of a x P,...,a n P base P, where n is 
a positive integer, P is a point on an elliptic curve; 

a point P is of order m and where e m (P,Q):E[m]xE[m]^>GF(qY denotes 
a Tate or Weil or Squared Tate or Squared Weil Pairing, where a x P,.„,a n P = 
Q l9 ...,Q n and where q is a prime power 

18. A method as recited in claim 13, wherein the signature S is 
represented by a number of bits, wherein the method further comprises truncating 
a specific number of bits off of S before the indicating. 

19. A method as recited in claim 13, wherein the first hashing function 
produces values in { ±1}. 
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20. A computer-readable medium having computer-executable 
instructions that, when executed by the system, performs a method comprising: 

obtaining an input message-and-signature pair {M y S)\ 
defining a vector v to be v h ...,v n based upon a predefined first hashing 
function of the message; 

calculating a point Q on an elliptic curve in accordance with this equation: 

comparing pairing outputs of a pair (P, S) and a pair (Q, H 2 (M)), where 
H 2 {M) is a predefined second hashing function of M and P is a point on the elliptic 
curve; 

indicating results of the comparing. 

21. A medium as recited in claim 20 further comprising verifying the 
input message-and-signature pair (M t S) when the indicated results of the 
comparing is a match. 

22. A medium as recited in claim 20, wherein: 

the point P being a point on an elliptic curve and of order m and where 
e m( p >Q) : E[m]xE[m] GF(q)* denotes a Tate or Weil or Squared Tate or Squared 
Weil Pairing, where a x P,...,a n P = Q x ,...,Q n and where q is a prime power 

the a; being scaling factors for n discrete logs of a } P 9 ... 9 a tt P base P, where 
n is a positive integer, 
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23. A medium as recited in claim 20, wherein the method further 
comprises, when the indicated results of the comparing is not a match, modifying 
the vector v relative to its previous definition and repeating the defining, 
calculating, and comparing. 

24. A medium as recited in claim 20, wherein the method further 
comprises: 

when the indicated results of the comparing is not indicate a match, 
modifying the vector v relative to its previous definition; 
repeating the defining, calculating, and comparing; 

if the indicated results of the comparing still does not a match, then 
repeating the modifying and the repeating of the defining, calculating, and 
comparing until the indicated results do match. 

25. A medium as recited in claim 20, wherein the method further 
comprises when the indicated results of the comparing is not a match, repeating 
the defining, calculating, and comparing with the defining being based upon a 
predefined third hashing function of the message. 

26. A medium as recited in claim 20, wherein the signature S is 
represented by a number of bits, wherein the method further comprises padding S 
with a specific number of bits before the defining. 
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27. A computing device comprising: 

an output device; 

a medium as recited in claim 20. 
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28. A method facilitating the verification of a digital signature, the 
method comprising: 

obtaining an input message-and-signature pair (Af, 5); 
defining a vector v to be v h ...,v n based upon a predefined first hashing 
function of the message; 

calculating a point Q on an elliptic curve in accordance with this equation: 

comparing pairing outputs of a pair (P, S) and a pair (Q, H 2 (M)\ where 
H 2 (M) is a predefined second hashing function of M and P is a point on the elliptic 
curve; 

indicating results of the comparing. 

29. A method as recited in claim 28 further comprising verifying the 
input message-and-signature pair (M t S) when the indicated results of the 
comparing is a match. 

30. A method as recited in claim 28, wherein 

the point P being a point on an elliptic curve and of order m and where 
e m( p >Q) : E[m]xE[m] -» GF(qY denotes a Tate or Weil or Squared Tate or Squared 
Weil Pairing, where a x P,„.,a n P = Q ]9 ... 9 Q„ and where q is a prime power 

the Oi being scaling factors for n discrete logs of a x P,...,a n P base P \ where 
n is a positive integer, 
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31. A method as recited in claim 28 further comprising, when the 
indicated results of the comparing is not a match, modifying the vector v relative 
to its previous definition and repeating the defining, calculating, and comparing. 

32. A method as recited in claim 28 further comprising: 

when the indicated results of the comparing is not a match, modifying the 
vector v relative to its previous definition; 

repeating the defining, calculating, and comparing; 

if the indicated results of the comparing still does not a match, then 
repeating the modifying and the repeating of the defining, calculating, and 
comparing until the indicated results do match. 

33. A method as recited in claim 28 further comprising when the 
indicated results of the comparing is not a match, repeating the defining, 
calculating, and comparing with the defining being based upon a predefined third 
hashing function of the message. 

34. A method as recited in claim 28, wherein the signature S is 
represented by a number of bits, wherein the method further comprises padding S 
with a specific number of bits before the defining. 
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35. A computer-readable medium having computer-executable 
instructions that, when executed by the system, performs a method comprising: 

obtaining an input message-and-signature pair (M, S'); 
defining a vector v to be Vi,...,v„ based upon a predefined first hashing 
function of the message; 

calculating a point Q on an elliptic curve in accordance with this equation: 

comparing pairing outputs of a pair (P, S') and a pair (Q, H 2 (M)Y, where 
H 2 {M) is a predefined second hashing function of M and P is a point on the elliptic 
curve and ji is an integer in a defined range; 

indicating results of the comparing. 

36. A medium as recited in claim 35 further comprising verifying the 
input message-and-signature pair (M f *S") when the indicated results of the 
comparing is a match. 

37. A computing device comprising: 
an output device; 

a medium as recited in claim 35. 
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